Amendments to the Claims; 

This listing of claims will replace all prior versions, and listings, of claims in tiie application: 

Listing of Claims; 

1. (Currentiy Amended) A metiiod for managing a plurality of computer systems attached to a 
network, said method comprising the computer implement steps of: 

defining attributes that are of interest in the operation of said computer systems, for each type of 
element in said plurality of computer systems; 

assigning values to each of said attributes associated with [[said]]an element for each element in 
said plurality of computer systems; 

defining a policy concerning a first set of said elements in terms of relationships between a 
corresponding first set of values of said attributes associated with said first set of elements and a second 
set of desired values; and 

performing at least one operation, chosen from a group of set operations consisting of: filter, 
projection, section, diagonal, union, intersection, subset, setminus, and cardinal, on said first set of values 
to determine if said first set of values meets said policy. 

2. (Original) The method of claim 1, further comprising providing a report on compliance to said 
policy by said first set of elements. 

3. (Cancelled) 

4. (Currentiy Amended) The method of Claim 1 claim 2, wherein said reporting step comprising 
reporting elements that did not comply with said policy. 

5. (Currently Amended) The method of Claim claim 1, wherein said defining step uses the 
relationships of "belongs to" and "does not belong to". 

6. (Currentiy Amended) The method of Claim claim 1 , wherein said defining step uses multiple 
relationships joined by the operations "and", "or", and "not". 

7. (Currently Amended) A computer program product, comprising computer readable instructions 
tangibly embodied in a computer readable recordable-type medium, for managing enforcement of a set of 
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policies on a plurality of computer systems attached to a network, said computer program product 
comprising: 

first instructions for defining, for each type of element in said plurality of computer systems, 
attributes that are of interest in the operation of said computer systems; 

second instructions for assigning, for each element in said plurality of computer systems, values 
to each of said attributes associated with said element; 

third instructions for defining a policy concerning a first set of said elements in terms of 
relationships between a corresponding first set of values of said attributes associated with said first set of 
elements and a second set of values; and 

fourth instructions for performing at least one operation, chosen from a group of set operations 
consisting of: filter, projection, section, diagonal union, intersection, subset, setminus, and cardinal , on 
said first set of values to determine if said first set of values meets said policy. 

8. (Currently Amended) The method of Claim 1 computer program product of claim 7 . further 
comprising fifth instructions for providing a report on compliance to said policy by said first set of 
elements. 

9. (Cancelled) 

10. (Currently Amended) The method of Claim 6 computer program product of claim 8 . wherein 
said fifth instruction comprises reporting elements that did not comply with said policy. 

11. (Currently Amended) The method of Claim 6 computer program product of claim 7 . wherein 
said third instruction uses the relationships of "belongs to" and "does not belong to". 

12. (Currently Amended) The method of Claim 6 computer program product of claim 7 . wherein 
said third instruction uses multiple relationships joined by the operations "and", "or", and "not". 

13. (Currently Amended) A computer system comprising: 
a processor having a connection to a network; 

a keyboard connected to input information to said processor; 
an output device for providing reporting capabilities; 

a set of instructions stored in memory and connected to be executed by said processor, said set of 
instructions comprising: 
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first instructions for defining, for each type of element in a plurality of computer systems that are 
connected to be managed by said computer system, attributes that are of interest in the operation of said 
computer systems; 

second instructions for assigning, for each element in said plurality of computer systems, values 
to each of said attributes associated with said element; 

third instructions for receiving a policy concerning a first set of said elements defined in terms of 
relationships between a corresponding first set of values of said attributes associated with said first set of 
elements and a second set of values; and 

fourth instructions for performing at least one operation, chosen from a group of set operations 
consisting of: filter, projection, section, diagonal, union, intersection, subset, setminus. and cardinal , on 
said first set of values to determine if said first set of values meets said policy. 

14. (Currently Amended) The computer system of Claim 6 claim 13 . further comprising fifth 
instructions for providing a report on compliance to said policy by said first set of elements. 

15. (Cancelled) 

16. (Currently Amended) The computer system of Claim 11 claim 14 . wherein said fifth instruction 
comprises reporting elements that did not comply with said policy. 

17. (Currently Amended) The computer system of Claim 11 claim 13 . wherein said third instructions 
receive policies using the relationships of "belongs to" and "does not belong to". 

18. (Currently Amended) The computer system of Claim 11 claim 13 , wherein said third instructions 
receive multiple relationships joined by the operations "and", "or", and "not". 

19. (Currently Amended) The computer system of Claim 11 claim 14 . wherein said report is 
provided on said output device. 
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